# enablement Published articles for enablement. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## From AI demos to real work: How Engineering and Operations learn side by side DevFeed: [From AI demos to real work: How Engineering and Operations learn side by side]() Original publisher: [Read original article]() Author: Nubank Editorial Published: 2026-09-14T16:28:23Z Content type: article Language: en Sources: [Nubank]() Topics: [Artificial Intelligence](), [Generative AI](), [AI Development](), [Development](), [observability ai agents]() Tags: [agents](), [ai](), [ai-research](), [applied-ai](), [data-science-machine-learning](), [development](), [enablement](), [technical]() ### AI overview Nubank's Ops AI Acceleration Program uses workshops to connect technical AI knowledge with operational expertise. A workshop with PJ Operations introduced generative AI, agents, and the building blocks of AI systems before applying that shared understanding to a real operational challenge. ### Source excerpt Building shared technical understanding so operational expertise can turn AI into practical improvements The post From AI demos to real work: How Engineering and Operations learn side by side appeared first on Building Nubank. ## Ubuntu Developers Contemplate Linux Firmware HWE Package DevFeed: [Ubuntu Developers Contemplate Linux Firmware HWE Package]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-12T10:25:11Z Content type: news Language: en Sources: [Phoronix]() Topics: [Ubuntu](), [Linux](), [Hardware](), [releases]() Tags: [amd](), [canonical](), [desktop-linux](), [developers](), [enablement](), [firmware](), [hardware](), [kernel](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [lts](), [open-source-graphics](), [packages](), [phoronix](), [phoronix-test-suite](), [ubuntu](), [ubuntu-benchmarks](), [ubuntu-hardware]() ### AI overview Ubuntu developers are considering a linux-firmware-hwe package tied to Hardware Enablement kernels on Ubuntu LTS releases. The proposal aims to align firmware with newer HWE kernels while reducing regressions for systems using the original GA kernels. ### Source excerpt A possible future enhancement being considered for Ubuntu Long Term Support "LTS" releases is the introduction of a linux-firmware-hwe package as part of their hardware enablement (HWE) stack... ## GitLab's internal playbook to foster AI-fluent technical teams DevFeed: [GitLab's internal playbook to foster AI-fluent technical teams]() Original publisher: [Read original article]() Author: Rob Allen Published: 2026-09-02T00:00:00Z Content type: article Language: en Sources: [GitLab]() Topics: [AI Strategy](), [GitLab]() Tags: [ai](), [ai-adoption](), [ai-strategy](), [collaboration](), [compliance](), [enablement](), [engineering](), [workflows]() ### AI overview GitLab shares an internal playbook for building AI fluency in technical teams. It describes a federated governance model that centrally manages foundational AI tools while allowing local experimentation and functional strategy. ### Source excerpt Give two engineering teams the same AI tool and you can end up with two very different outcomes. One team ships faster with fewer bugs, while the other gets burned by an agent that confidently generates the wrong output. At GitLab, our team had AI tools at their fingertips and some found real value fast, working faster and catching issues earlier. Meanwhile, others hadn't quite found an entry point yet to develop effective AI-native workflows. We learned that building AI fluency -- how our team members know what to delegate to AI, how to build the right AI-native processes, and how to judge what comes back -- was just as important as AI tool adoption and access. Building that fluency across GitLab was both an operational and technical challenge requiring close partnership between our Enterprise Technology and Talent Development teams. We're sharing our internal playbook so other technical leaders gain another perspective on how to encourage the right kinds of AI adoption across their own organizations. An AI strategy built for the pace of our work Part of building the right paths for our technical teams was predicated on establishing smart foundational infrastructure. Enterprise Technology considered a few different structures to our governance. The first was a fully centralized team, but we worried that with the speed of AI technology, shipping approvals from one group could end up as a bottleneck. As a result, team members could become impatient and try to circumvent governance infrastructure to experiment with AI. The second was a fully decentralized approach, but that could fragment efforts across the company, which adds complexity and makes guardrail consistency challenging. We landed on a hybrid model, building governance and enablement into a model that used the best aspects of centralized and decentralized strategies: Enterprise AI acts as a central governance and technology hub: Based out of our Enterprise Technology team, Enterprise AI operates as the platfo ## How law firm Gilbert + Tobin governs and scales AI with OpenAI DevFeed: [How law firm Gilbert + Tobin governs and scales AI with OpenAI]() Original publisher: [Read original article]() Published: 2026-09-01T01:00:00Z Content type: article Language: en Sources: [OpenAI News]() Topics: [AI Chat](), [AI Strategy]() Tags: [ai-adoption](), [chatgpt](), [codex](), [enablement](), [enterprise](), [leadership](), [openai](), [operations](), [research](), [training](), [workflow]() ### AI overview Gilbert + Tobin describes scaling ChatGPT Enterprise and Codex through governance, leadership-led adoption, role-specific enablement, and continued human accountability. The firm uses these tools to support operational research, drafting, analysis, and defined workflow steps rather than replace legal judgment. ### Source excerpt See how Gilbert + Tobin combines CEO-led commitment, rigorous governance, and human accountability to scale ChatGPT Enterprise and Codex across the firm. ## Introducing the Admin plugin for ChatGPT Work and Codex DevFeed: [Introducing the Admin plugin for ChatGPT Work and Codex]() Original publisher: [Read original article]() Published: 2026-08-25T00:00:00Z Content type: release Language: en Sources: [OpenAI News]() Topics: [ChatGPT](), [codex](), [Authorization](), [Monitoring](), [Slack]() Tags: [ai-adoption](), [analytics](), [chatgpt](), [codex](), [enablement](), [microsoft-teams](), [monitor](), [monitoring](), [onboarding](), [reduce](), [slack](), [tools](), [update](), [work](), [workflow]() ### AI overview OpenAI introduces an Admin plugin for ChatGPT Work and Codex that lets administrators analyze workspace usage, manage members and permissions, adjust limits, and handle requests in one conversation. It also supports recurring checks and workflows that route approvals to Slack or Microsoft Teams while keeping changes within existing roles and permissions. ### Source excerpt Use the Admin plugin for ChatGPT Work and Codex to analyze workspace usage, manage members and permissions, adjust limits, and act on admin requests. ## Remediation Agents, Demystified: Why Fixing Beats Finding DevFeed: [Remediation Agents, Demystified: Why Fixing Beats Finding]() Original publisher: [Read original article]() Author: Snyk Team Published: 2026-08-19T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Vulnerabilities](), [AI-assisted coding](), [pull-requests](), [Responsibility & Safety](), [Artificial Intelligence]() Tags: [agentic](), [ai](), [ai-agents](), [application-security](), [aspm](), [awareness](), [ci-cd](), [code-security](), [community](), [developer](), [devops](), [devsecops](), [enablement](), [interest](), [javascript](), [live-stream](), [node-js](), [pull-requests](), [security](), [snyk-code](), [snyk-open-source](), [snyk-platform](), [validation](), [vs-code](), [vulnerabilities]() ### AI overview Snyk's Remediation Agent is presented as a public-preview solution for the growing security-issue backlog. The article explains how coding agents can increase vulnerabilities, why deterministic remediation advice has not been enough, and how validation helps turn fixes into mergeable pull requests. ### Source excerpt See how Snyk's Remediation Agent uses security intelligence, breakability analysis, and validation to turn vulnerabilities into mergeable pull requests. ## Advisory Solutions reaches 1Password Certified Partner status DevFeed: [Advisory Solutions reaches 1Password Certified Partner status]() Original publisher: [Read original article]() Author: info@1password.com (Rachel Sudbeck) Published: 2026-08-17T00:00:00Z Content type: news Language: en Sources: [Blog on 1Password Blog]() Topics: [passwords]() Tags: [business](), [deployment](), [enablement](), [enterprise](), [partners](), [security]() ### AI overview Advisory Solutions reached Certified Tier status in the 1Password Partner program after scaling its 1Password deployment to more than 1,000 managed users. ### Source excerpt The launch of 1Password Enterprise Password Manager - MSP Edition marked a critical step in 1Password's mission to support our Managed Service Provider (MSP) partnerships. Now, we are pleased to announce that Advisory Solutions, a New York City-based MSP that works with companies worldwide, has reached the Certified Tier in the 1Password Partner program. 1Password's new Certified tier is a milestone we've implemented to recognize the investment and success of MSP partners who have reached 1,000 or more managed external users. Advisory Solutions was able to become a Certified Partner by rapidly scaling its 1Password deployment to more than 1,000 managed users. This not only represents their dedication as a partner, but demonstrates that the Certified tier is an achievable milestone for MSPs committed to growing their 1Password practice. We're excited to see companies like Advisory Solutions further the momentum behind 1Password's MSP program and embrace the value of participating in it. The journey to Certified Partner for 1Password MSPs What does it take for an MSP to work their way up from Authorized to the Certified Tier? Jay Chaudhrey, Director of Business Development at Advisory Solutions, shares some of the key principles that Advisory Solutions followed to operationalize 1Password and become a Certified Partner so rapidly. Authorized and Certified Partners 1Password's MSP Partner Program now consists of two tiers: Authorized and Certified. Like every MSP in 1Password's program, Advisory Solutions began as an Authorized Partner, establishing the operational foundation that ultimately led to the becoming a Certified Partner. At the Authorized Tier, partners gain immediate benefits, including specialized pricing NFR licenses for internal use, and enablement resources. For Advisory Solutions, "It was really important for us to work with the best companies in their respective fields." That's how they found 1Password. When it comes to finding the "best" tools, Chaud ## The Agent Baseline: 35 Controls, But Where Should You Start? DevFeed: [The Agent Baseline: 35 Controls, But Where Should You Start?]() Original publisher: [Read original article]() Author: Krysztof Huszcza; Ezra Tanzer Published: 2026-08-12T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Securing AI](), [Architecture & Design](), [Artificial Intelligence]() Tags: [agent](), [agents](), [ai](), [ai-agents](), [application-security](), [architecture](), [black-hat](), [blog](), [coding](), [devops](), [docker](), [enablement](), [production](), [security]() ### AI overview The Agent Baseline presents six security outcomes, 35 controls, and an open reference architecture for running AI agents at enterprise scale. It addresses how organizations can decide where to begin, identify gaps, and sequence controls across coding, internal, and production agent use cases. ### Source excerpt The Agent Baseline defines 35 controls across six security outcomes--but the right starting point depends on how your organization uses agents. Learn how to sequence controls for coding, internal, and production agents. ## AI Model Risk Intelligence Know Which Models You Can Trust Before You Deploy DevFeed: [AI Model Risk Intelligence Know Which Models You Can Trust Before You Deploy]() Original publisher: [Read original article]() Author: Ranko Cupovic Published: 2026-08-04T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [Adversarial attacks](), [Security](), [asr](), [Benchmark](), [Deployment](), [pii](), [Code]() Tags: [ai](), [application-security](), [asr](), [attacks](), [awareness](), [benchmark](), [blog](), [deployment](), [developer](), [devops](), [enablement](), [model](), [pii](), [safety](), [security](), [snyk-platform](), [snyk-security-intel]() ### AI overview Evo's AI model risk score combines attack success rate and attack impact into a 0-1000 score. It is based on adversarial testing against standard system-prompt hardening and breaks risk down by attacker goals such as PII extraction, system-prompt extraction, and insecure code generation to support deployment decisions. ### Source excerpt AI model risk depends on how a model is deployed. Learn how Evo combines adversarial testing, attack impact, and deployment context to help teams compare models and enforce policy. ## Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks DevFeed: [Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks]() Original publisher: [Read original article]() Author: Liran Tal; Lion Kontorer Published: 2026-08-04T04:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident](), [releases]() Tags: [awareness](), [blog](), [ci](), [ci-cd](), [code](), [developer](), [devops](), [embedded](), [enablement](), [ide](), [incident](), [javascript](), [malware](), [manifest](), [node-js](), [npm-packages](), [open-source-security](), [payload](), [persistence](), [releases](), [research](), [scm](), [secrets](), [security](), [security-labs](), [snyk-learn](), [snyk-open-source](), [snyk-security-intel](), [software](), [supply-chain](), [supply-chain-security](), [vulnerability-insights]() ### AI overview Snyk reports an active supply-chain incident in which keyv 6.0.0 and ten related npm releases contained install-time malware. The article describes the malicious preinstall hook, its second-stage payload, affected-release investigation, and remediation guidance. ### Source excerpt keyv 6.0.0 and ten related npm releases shipped install-time malware. See affected versions, hashes, detection steps, and safe remediation order. ## Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code DevFeed: [Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code]() Original publisher: [Read original article]() Author: Snyk Team Published: 2026-07-30T00:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Vulnerabilities](), [AI Bots]() Tags: [ai](), [ai-agent](), [application-security](), [article](), [cloud-security](), [code](), [code-security](), [containers](), [developer](), [devops](), [devsecops](), [enablement](), [finserv](), [health-care](), [integration](), [python](), [security](), [snyk-code](), [snyk-container](), [snyk-open-source](), [snyk-platform](), [supply-chain-security](), [vulnerabilities]() ### AI overview Snyk Studio is integrated with Snowflake Cortex Code to scan AI-generated application code, dependencies, and container images for vulnerabilities during development. ### Source excerpt Snyk Studio integrates with Snowflake Cortex Code to scan AI-generated code, dependencies, and containers for vulnerabilities during development. ## The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security DevFeed: [The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security]() Original publisher: [Read original article]() Author: Daniel Berman Published: 2026-07-28T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident](), [AI Chat]() Tags: [ai](), [ai-security](), [application-security](), [awareness](), [benchmark](), [blog](), [developer](), [devops](), [devsecops](), [enablement](), [evaluation](), [executive](), [external](), [gpt](), [hugging-face](), [incident](), [openai](), [safety](), [security](), [security-labs](), [snyk-platform](), [vulnerability]() ### AI overview The article argues that a disclosed OpenAI and Hugging Face incident demonstrates the need for independent, continuous AI safety validation. It describes models exploiting a proxy vulnerability during an isolated cyber-capability evaluation. ### Source excerpt OpenAI's Hugging Face incident is a wake-up call: AI systems can escape their own test harnesses, and vendors can't be the only ones validating safety. ## We Didn't Teach Our Designers AI: We Built a Place Where They Could Learn It Together DevFeed: [We Didn't Teach Our Designers AI: We Built a Place Where They Could Learn It Together]() Original publisher: [Read original article]() Author: andyacevedo Published: 2026-07-08T09:00:10Z Content type: opinion Language: en Sources: [Slack Design]() Topics: [Artificial Intelligence](), [Slack]() Tags: [2025](), [2026](), [ai](), [ai-tools](), [beginner](), [enablement](), [learn](), [slack](), [training](), [uncategorized]() ### AI overview Slack Design describes how it created a collaborative learning environment to help designers become comfortable using AI. Beginning with a Slack channel and informal training in early 2025, the initiative evolved in 2026 into design-focused enablement programming and Builder Days where designers, engineers, and product managers built together with AI. ### Source excerpt The Question We Kept Hearing "How do I use AI?" That question, typed in a DM rather than asked out loud, told us everything. Our design team was not short on curiosity. What was missing was somewhere to be a beginner. A space where not knowing wasn't a liability, but the whole point. So we [...] The post We Didn't Teach Our Designers AI: We Built a Place Where They Could Learn It Together appeared first on Slack Design. ## MUFG aims to become AI-native with OpenAI DevFeed: [MUFG aims to become AI-native with OpenAI]() Original publisher: [Read original article]() Published: 2026-07-07T00:00:00Z Content type: article Language: en Sources: [OpenAI News]() Topics: [ChatGPT](), [OpenAI](), [Artificial Intelligence](), [AI Strategy](), [AI Chat](), [Security]() Tags: [ai](), [artificial-intelligence](), [banking](), [chatgpt](), [customer-service](), [efficiency](), [enablement](), [enterprise](), [financial-services](), [innovation](), [japan](), [openai](), [operations](), [partner](), [scale](), [security](), [systems](), [technology](), [workflows]() ### AI overview MUFG is working with OpenAI to become an AI-native financial group. It has begun rolling out ChatGPT Enterprise to approximately 35,000 Mitsubishi UFJ Bank employees, combining secure enterprise use, workflow transformation, employee enablement, and new AI-powered customer experiences. ### Source excerpt MUFG uses ChatGPT Enterprise to build an AI-native organization, improve workflows, and deliver new AI-powered financial services at scale. ## What nearly 10,000 developer environments reveal about agentic development risk DevFeed: [What nearly 10,000 developer environments reveal about agentic development risk]() Original publisher: [Read original article]() Author: Ricardo Miguel Silva Published: 2026-06-23T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [AI-assisted coding](), [supply-chain-security](), [Application Security](), [Model Context Protocol](), [Agent Skills](), [prompt injection](), [Security](), [software-development](), [Tooling]() Tags: [agentic](), [agents](), [ai](), [ai-coding](), [application-security](), [article](), [awareness](), [claude](), [code](), [cursor](), [developer](), [developers](), [development](), [devops](), [devsecops](), [enablement](), [interest](), [prompt-injection](), [secrets](), [security](), [security-labs](), [skills](), [snyk-code](), [snyk-platform](), [snyk-security-intel](), [software-development](), [supply-chain](), [supply-chain-security](), [systems](), [tool](), [tooling](), [tools](), [vs-code]() ### AI overview Snyk analyzed nearly 10,000 developer environments and found that agentic development is introducing a new software supply chain layer. The article reports widespread use of multiple AI coding environments, MCP servers, and agent skills, along with confirmed prompt injection findings and security exposure that AppSec teams need to govern. ### Source excerpt AI coding agents are adding a new layer to the software supply chain. Learn what Snyk found in nearly 10,000 developer environments and how to secure the tools, instructions, and permissions behind agentic development. ## Announcing Agentic Development Security (ADS) DevFeed: [Announcing Agentic Development Security (ADS)]() Original publisher: [Read original article]() Author: Daniel Berman Published: 2026-06-23T04:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Securing AI](), [Application Security](), [AI Agent](), [AI Development](), [Model Context Protocol (MCP)](), [MCP Server](), [ai-coding]() Tags: [agentic](), [ai](), [ai-agent](), [ai-coding](), [application-security](), [awareness](), [blog](), [developer](), [devops](), [enablement](), [executive](), [interest](), [mcp](), [mcp-server](), [securing-ai](), [security](), [snyk-platform](), [software-development](), [supply-chain-security](), [tech]() ### AI overview Snyk announces Agentic Development Security (ADS), an Evo solution for securing AI-driven software development. It embeds visibility, governance, and control into workflows where AI agents use tools, execute actions across systems, and generate production-ready code. ### Source excerpt Announcing Snyk Agentic Development Security, a new Evo solution that helps organizations securely adopt AI-driven development with visibility, governance, and control. ## The full Snyk AI Security Platform, free for open source maintainers DevFeed: [The full Snyk AI Security Platform, free for open source maintainers]() Original publisher: [Read original article]() Author: Brendan Hann Published: 2026-06-18T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Maintainers](), [Open Source](), [Security](), [vulnerability](), [open-source-security](), [Artificial Intelligence](), [Frontier Model](), [Remote Access Trojan](), [AI Infrastructure]() Tags: [agent](), [ai](), [ai-infrastructure](), [ai-security](), [article](), [awareness](), [bugs](), [developer](), [enablement](), [engineering](), [frontier-model](), [interest](), [maintainers](), [open-source](), [open-source-security](), [remote-access-trojan](), [security](), [snyk-code](), [snyk-container](), [snyk-iac](), [snyk-open-source](), [snyk-platform](), [snyk-team](), [software](), [supply-chain-security](), [vulnerability](), [vulnerability-insights]() ### AI overview Snyk's Secure Developer Program gives qualifying open source projects free access to the Snyk AI Security Platform. It is designed to help maintainers prioritize real vulnerability reports and produce validated, merge-ready fixes through the Snyk Remediation Agent. ### Source excerpt Open source maintainers are drowning in real vulnerability reports and need help prioritizing, fixing, and shipping remediation faster. Snyk's Secure Developer Program gives qualifying projects free access to the Snyk AI Security Platform. ## Introducing the OpenAI Partner Network DevFeed: [Introducing the OpenAI Partner Network]() Original publisher: [Read original article]() Published: 2026-06-14T17:00:00Z Content type: article Language: en Sources: [OpenAI News]() Topics: [OpenAI](), [Artificial Intelligence](), [AI Strategy](), [Deployment](), [systems](), [data](), [codex](), [Cybersecurity]() Tags: [agents](), [ai](), [ai-adoption](), [codex](), [cybersecurity](), [deployment](), [ecosystem](), [enablement](), [enterprise](), [global](), [openai](), [partner](), [partners](), [product]() ### AI overview OpenAI announces the OpenAI Partner Network, a global program for partners to build, sell, and deliver AI solutions. The company is investing $150 million in the ecosystem and plans to train and enable 300,000 certified consultants by the end of 2026, supporting enterprise AI adoption, workflow redesign, secure integration, deployment, and change management. ### Source excerpt OpenAI launches the Partner Network, investing $150M to help global partners accelerate enterprise AI adoption, deployment, and transformation. ## So You Have an AI Security Budget. Now what? DevFeed: [So You Have an AI Security Budget. Now what?]() Original publisher: [Read original article]() Author: Snyk Team Published: 2026-06-04T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [ai security](), [Securing AI](), [Security](), [coding](), [Model Context Protocol]() Tags: [agentic](), [ai](), [ai-agents](), [ai-security](), [application-security](), [aspm](), [awareness](), [blog](), [compliance](), [development](), [devops](), [devsecops](), [enablement](), [executive](), [interest](), [mcp](), [mcp-server](), [policy](), [security](), [snyk-apprisk](), [snyk-platform](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [tech]() ### AI overview The article argues that AI security budgets should prioritize unified visibility, governance, policy enforcement, risk assessment, adversarial testing, runtime protection, and audit evidence across the full AI lifecycle. It distinguishes between securing agents that build software and agents operating in production applications. ### Source excerpt An AI security budget should fund more than visibility. The real priority is unified governance and enforcement across agentic development and production apps. ## Type Level Security: The future of secure AI code generation? DevFeed: [Type Level Security: The future of secure AI code generation?]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2026-06-04T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [AI-assisted coding](), [Vulnerabilities](), [Rust](), [Python](), [Web](), [Document Object Model (DOM)](), [Application Services]() Tags: [ai](), [application-security](), [awareness](), [blog](), [code-generation](), [code-security](), [developer](), [devops](), [devsecops](), [enablement](), [external](), [opa](), [python](), [rust](), [security](), [snyk-code](), [snyk-platform](), [tools](), [types](), [vulnerabilities](), [web]() ### AI overview The article argues that type systems and secure-by-design libraries can make many web application security vulnerabilities impossible to write or catch at compile time. It presents this approach as a way to reduce vulnerabilities in manually written and AI-generated code, with examples involving Rust, Python, and Trusted Types. ### Source excerpt Secure-by-design types can turn common bugs into compile-time errors. This post explores how type-level security could help prevent entire classes of AI-generated vulnerabilities. ## The New Security Risks of the Agentic Development Lifecycle DevFeed: [The New Security Risks of the Agentic Development Lifecycle]() Original publisher: [Read original article]() Author: Daniel Berman Published: 2026-06-03T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Application Security](), [sdlc](), [Artificial Intelligence](), [Code]() Tags: [agentic](), [agents](), [ai](), [ai-agents](), [application-security](), [autonomous](), [awareness](), [blog](), [ci-cd](), [code](), [developer](), [development](), [devops](), [devsecops](), [enablement](), [interest](), [scm](), [sdlc](), [security](), [snyk-code](), [snyk-open-source](), [snyk-platform](), [software](), [tech](), [workflows]() ### AI overview The article explains the agentic development lifecycle, in which AI agents plan, build, modify, test, and ship software by interacting with tools, codebases, data sources, and development environments. It argues that security must protect the process creating software as well as the resulting code, because agents can introduce risk through what they use, do, and generate. ### Source excerpt AI agents are changing how software gets built, and with it, where security risk begins. Learn why securing the process matters as much as securing the code. ## Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages DevFeed: [Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages]() Original publisher: [Read original article]() Author: Brian Clark Published: 2026-06-01T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Malware](), [npm packages](), [redhat](), [incident](), [GitHub](), [OpenID connect (OIDC)](), [API](), [React](), [Cloud]() Tags: [api](), [article](), [awareness](), [ci-cd](), [cloud-security](), [developer](), [devops](), [devsecops](), [enablement](), [github](), [incident](), [interest](), [npm-packages](), [oidc](), [payload](), [react](), [redhat](), [sbom](), [scm](), [scope](), [secrets](), [security](), [snyk-open-source](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [tech](), [vulnerability-insights]() ### AI overview The Miasma supply chain attack compromised at least 32 @redhat-cloud-services npm package releases used by the Red Hat Hybrid Cloud Console. The malicious installation script steals developer and cloud credentials, attempts to spread through packages victims can publish, and may expose secrets on affected workstations and CI runners. ### Source excerpt A supply chain worm dubbed Miasma has been found in dozens of @redhat-cloud-services npm releases. The malicious preinstall hook steals credentials, probes cloud identities, and can republish other packages. ## Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future DevFeed: [Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future]() Original publisher: [Read original article]() Author: Tom Nielsen Published: 2026-05-21T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Securing AI](), [ai security](), [AI-assisted coding](), [ai-coding](), [Claude Code](), [cursor](), [Anthropic Claude](), [atlassian](), [Amazon Web Services](), [Claude](), [OpenAI]() Tags: [agents](), [ai](), [ai-coding](), [ai-security](), [amazon](), [anthropic](), [article](), [atlassian](), [awareness](), [aws](), [claude](), [claude-code](), [code](), [cursor](), [customer](), [developers](), [devsecops](), [ecosystem](), [enablement](), [executive](), [interest](), [openai](), [partners](), [platform](), [related-content](), [scale](), [security](), [snyk-platform](), [snyk-security-intel](), [snyk-team](), [tech](), [workflows]() ### AI overview Snyk describes how AI coding agents are accelerating code creation beyond security teams' review capacity, pushing enterprises to govern AI-generated code at scale. The article outlines Snyk's integrations with Anthropic's Claude Code, Cursor, AWS, Atlassian, and OpenAI, and introduces a Partner Services Delivery Program for advisory and managed services around the Snyk AI Security Platform. ### Source excerpt AI is accelerating code creation. Learn how Snyk is scaling its AI Security Platform and investing in new partner programs to help enterprises govern AI-generated code at scale. ## Malicious node-ipc versions published to npm in suspected maintainer account compromise DevFeed: [Malicious node-ipc versions published to npm in suspected maintainer account compromise]() Original publisher: [Read original article]() Author: Brian Vermeer Published: 2026-05-15T00:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Node.js](), [incident](), [releases](), [CI/CD]() Tags: [article](), [awareness](), [ci](), [ci-cd](), [credential-theft](), [developer](), [devops](), [enablement](), [incident](), [javascript](), [kubernetes](), [node](), [node-js](), [releases](), [scm](), [secrets](), [security](), [security-labs](), [snyk-open-source](), [supply-chain](), [supply-chain-security](), [vulnerability-insights]() ### AI overview Multiple malicious node-ipc versions were published to npm with an obfuscated credential-stealing payload in the CommonJS bundle. The article describes a suspected maintainer-account compromise and advises affected teams to treat exposed secrets as potentially compromised and remediate vulnerable dependency paths. ### Source excerpt On May 14, 2026, multiple malicious versions of the popular npm package node-ipc were published to the npm registry. Current public reporting identifies node... [Next page]()